Exit ISO-27002-LI ISO/IEC 27002 - Lead Implementer
Question 2 of 5
0% complete
Q2 Single choice

You are the owner of a growing company, SpeeDelivery, which provides courier services. You decide that it is time to draw up a risk analysis for your information system. This includes an inventory of threats and risks.

What is the relation between a threat, risk and risk analysis?

  • A

    A risk analysis identifies threats from the known risks.

  • B

    A risk analysis is used to clarify which threats are relevant and what risks they involve.

  • C

    A risk analysis is used to remove the risk of a threat.

  • D

    Risk analyses help to find a balance between threats and risks.

Previous Next